CVEs published in December 2008
528 vulnerabilities, 129 critical, 0 exploited.
- microsoft internet explorerUse-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll...9.3 High
- hp hp-uxUnspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote...7.8 High
- 5e5 teamtek universal ftp serverTeamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon...5.0 Medium
- emc control centerThe SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not...7.8 High
- emc control centerStack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control...10.0 High
- justin roy punportal moduleDirectory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB...5.1 Medium
- hp decnet plus for openvmsHP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions...2.1 Low
- microsoft sql serverHeap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier;...9.0 High
- microsoft wordpadThe WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server...9.3 High
- microsoft office, office word, works +4 more +6 moreStack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold...9.3 High
- microsoft windows vista, windows server 2008 +1 moreThe search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and...8.5 High
- microsoft windows vista, windows server 2008 +1 moreThe Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not...8.5 High
- microsoft excel, excel viewer, office +1 more +3 moreArray index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel...9.3 High
- microsoft office, office excel, office compatibility pack for word excel ppt 2007 +2 more +4 moreMicrosoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted...9.3 High
- microsoft office, office excel, open xml file format converter +2 more +4 moreMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003...9.3 High
- microsoft internet explorerStack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote...8.5 High
- microsoft internet explorerMicrosoft Internet Explorer 7 sometimes attempts to access uninitialized memory locations, which...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls...8.5 High
- microsoft visual basic, visual foxpro, visual studio .net +2 more +4 moreThe Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003...8.5 High
- microsoft project, visual basic, visual foxpro +2 more +4 moreHeap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft...9.3 High
- microsoft visual basic, visual foxpro, office frontpage +2 more +4 moreMultiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in...8.5 High
- microsoft office frontpage, project, visual basic +2 more +4 moreThe FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and...8.5 High
- microsoft visual basic, visual foxpro, office frontpage +2 more +4 moreThe DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1...8.5 High
- microsoft office sharepoint server, search server +1 moreMicrosoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not...7.5 High
- microsoft office, office word, open xml file format converter +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and...9.3 High
- microsoft office, office word, office compatibility pack for word excel ppt 2007 +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and...9.3 High
- microsoft office, office word, open xml file format converter +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and...9.3 High
- microsoft office, office word, office compatibility pack for word excel ppt 2007 +4 more +6 moreDouble free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold...9.3 High
- microsoft office, office word, open xml file format converter +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold...9.3 High
- microsoft office, office word, open xml file format converter +4 more +6 moreInteger overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1;...9.3 High
- microsoft office, office word, office compatibility pack for word excel ppt 2007 +4 more +6 moreMicrosoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to...9.3 High
- microsoft windows 2000, windows 2003 server, windows server 2003 +3 more +5 moreHeap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server...9.3 High
- microsoft windows media playerMicrosoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows...10.0 High
- microsoft windows media format runtime, windows media player, windows media services +2 moreMicrosoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows...10.0 High
- microsoft windows 2000, windows 2003 server, windows server 2003 +3 more +5 moreInteger overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2,...9.3 High
- ibm websphere application serverUnspecified vulnerability in the Feature Pack for Web Services in the Web Services Security...10.0 High
- ibm websphere application serverPerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7...5.0 Medium
- ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows...10.0 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP,"...5.0 Medium
- sun solarisThe PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain...7.8 High
- twikiEval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary...10.0 High
- twikiCross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject...4.3 Medium
- freedesktop dbusThe default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type...4.6 Medium
- bitdefender antivirus, bitdefender, bullguard internet security +1 more +3 moreUnspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus...9.3 High
- symantec backup exec for windows serverBuffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 ...9.0 High
- symantec backup exec for windows serverMultiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec...9.4 High
- apple itunes, quicktime +1 moreStack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote...9.3 High
- oxid cain and abelStack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24...9.3 High
- grid2000 flexcell grid controlInsecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in...10.0 High
- Show moreLoading…